The Problem: Automotive safety recalls, Control Systems Diagnostics, Stability Control, Traction Control, Anti-lock Braking, Adaptive Cruise Control
|
|
- Millicent Shields
- 8 years ago
- Views:
Transcription
1 AUTOPLUG: Remote Diagnostics Automotive Architecture for Control Software Safety Rahul Mangharam, Yash V. Pant and Truong X. Nghiem Department of Electrical & Systems Engineering University of Pennsylvania The Problem: In 2010, over 20.3 million vehicles were recalled. Software issues related to automotive controls such as cruise control, anti-lock braking system, traction control and stability control, account for an increasingly large percentage of the overall vehicles recalled. There is a need for new and scalable methods to evaluate automotive controls in a realistic and open setting. We have developed AutoPlug, an automotive Electronic Controller Unit (ECU) test-bed to diagnose, test, update and verify controls software. AutoPlug consists of multiple ECUs interconnected by a CAN bus, a racecar driving simulator which behaves as the plant model and a vehicle controls monitor in Matlab. As the ECUs drive the simulated vehicle, the physics-based simulation provides feedback to the controllers in terms of acceleration, yaw, friction and vehicle stability. This closed-loop platform is then used to evaluate multiple vehicle control software modules such as traction, stability and cruise control. With this test-bed we are aim to develop ECU software diagnosis and testing to evaluate the effect on the stability and performance of the vehicle. Code updates can be executed via a smart phone so drivers may remotely patch their vehicle. This closed-loop automotive control test-bed allows the automotive research community to explore the capabilities and challenges of safe and secure remote code updates for vehicle recalls management. We have demonstrated AutoPlug to the U.S. Department of Transportation, Research and Innovative Technology Administration, John A. Volpe National Transportation Systems Center. We have also demonstrated this to the National Academy of Engineers (NAE), Intel Corporation, Toyota InfoTech Center, BOSCH Research and General Motors. Keywords Automotive safety recalls, Control Systems Diagnostics, Stability Control, Traction Control, Anti-lock Braking, Adaptive Cruise Control
2 Software-related Automotive Recalls The increasing complexity of software in automotive systems has resulted in the recent rise of firmware-related vehicle recalls due to undetected bugs and software faults. In 2009, Volvo recalled 17,614 vehicles due to a software error in the engine cooling fan control module 1. According to the NHSTA report, the error could result in engine failure and could possibly lead to a crash. In August 2011, Jaguar recalled 17,678 vehicles due to concerns that the Cruise Control in those vehicles may not respond to normal inputs and once engaged could not be switched off 2. In November 2011, Honda recalled 2.5 million vehicles to update the software that controls their automatic transmissions 3. While there is a significant effort for automotive software testing and verification at the design stage (e.g. AUTOSAR), not all possible runtime faults throughout the vehicle's lifetime can be detected. A systematic approach and infrastructure for post-market runtime diagnostics for the control software is lacking in current automotive systems. Once the vehicle leaves the dealership lot, its performance and operation safety is a black box to the manufacturers and the original equipment providers. For the over 100 million lines of code and over 60 Electronic Control Units (ECUs) in a modern vehicle, there are only about 8 standard Diagnostic Trouble Codes (DTCs) for software, and those too are generic (e.g. memory corruption). Out of the DTCs for software, none target the control software in the ECUs even though control systems like stability control, cruise control, and traction control are safety-critical systems. Approach: Runtime in-vehicle Diagnostics and Recalls Management The current approach for handling vehicle recalls is reactive where the manufacturers announce a recall only after the problem occurs in a significant population of deployed vehicles and all vehicles of that particular year/make/model are recalled. A software recall involves the vehicle being taken to service center and a technician either manually replaces the ECU which contains the faulty code, or reprograms the code onboard the ECU with the new version provided by the manufacturer. One problem with this method is that the decision to recall vehicles involves wordof-mouth or manually logged information going from the service centers to the manufacturer, which takes time and in the meanwhile may result in a malfunction within a safety critical system. This wait-and-see approach to recalls has a significant cost in both time and money and has a negative impact on the vehicle manufacturers reputation. The above observations lead us to believe that there is a need for systematic post-market invehicle diagnostics for control systems software such that issues can be detected early. The invehicle system would be responsible for data logging of sensor values and runtime evaluation of controller states. To complement this, a Remote Diagnostics Center (RDC) would receive this data, over a network link, to prepare an appropriate Fault Detection and Isolation (FDI) response. This would normally be in the form of sending a custom Dynamic Diagnostic Code that observes the ECUs and controller tasks in question. Once sufficient data is captured, the RDC, using a model of the plant, is able to execute a grey-box structured system identification to build a plant model of the particular vehicle. Using this vehicle-specific plant model, the RDC develops a fault-tolerant controller for the issue and the vehicle is remotely re-programmed via a code update. While this approach is difficult in practice, as it would require extensive runtime verification of the patched controller, we present the early design of such a system with AutoPlug. We have developed AutoPlug, an automotive Electronic Controller Unit (ECU) test-bed to diagnose, test, update and verify controls software. AutoPlug consists of multiple ECUs interconnected by a CAN bus, a vehicle driving simulator which behaves as the plant model and a vehicle controls monitor for system identification, diagnostics and remote programming of ECUs. 1 NHTSA Campaign ID: 09V Jaguar Software Issue May Cause Cruise Control to Stay On. 3 Honda recalls 2.5 million vehicles on software issue.
3 AutoPlug is focused on addressing software-related recalls for vehicles. Figure 1. Overview of AutoPlug services Methodology The AutoPlug automotive architecture aims to make the vehicle recalls process a less reactive one with a runtime system for diagnosis of automotive control systems and software. Our focus is on the on-line analysis of the control system and control software within the vehicle ECU network and between the vehicle and the RDC. We assume the network link between the two is available. The runtime system within the vehicle is responsible for: 1. Fault Detection and Isolation (FDI): Sensor, actuator and controller states are logged for the specific ECU. This data is analyzed locally and a summary of the states are transmitted to the RDC. 2. Fault Tolerant Controllers: Once a fault is detected, the high-performance controller is automatically replaced with a backup controller. 3. ECU re-programming for remote code updates: Upon reception of updated controller code from the RDC, the runtime system re-flashes the particular controller task(s) with the updated code. 4. Patched Controller runtime-verification: The updated code is monitored with continuous checks for safety and performance. We do not focus on this aspect in this paper but consider it in future work. Figure 2. Stages of the AutoPlug architecture While the on-board system provides state updates of the specific controller, the Remote Diagnostics Center (RDC) provides complementary support by:
4 1. Data analysis and fault localization: Using grey-box structured system identification, a plant model of the particular vehicle is created. The existing controller is evaluated on this model to isolate faulty behavior. 2. Reformulating Control and Diagnostics Code: A new controller is formulated for the specific plant model and further diagnostics code is dispatched. 3. Recalls Management: Reformulated controller code is transmitted to the vehicle. 4. Generating Controller Verification profiles: The updated controller is probed for performance and safety. Figure 3. AutoPlug Remote Diagnostic Center interfacing with vehicle controllers A more descriptive view is provided in Fig 1. Further explanation of these services is presented in our technical report 4. Findings A. AutoPlug Architecture Regular firmware updates over a network for infotainment systems in vehicles is now a rising trend. A central node keeps track of the firmware version for a large number of cars and when a new version is ready to be launched, updates the firmware code on each vehicle based on its difference with the existing version on the vehicle. Similar methods for the control systems and diagnostics code implemented on board the ECUs of vehicles have yet to be developed and implemented. This is because the safety-critical nature of the control systems implemented on the ECUs makes the task of coming up with these methods and proving their correctness more exacting. The working of the AutoPlug scheme can be divided into five steps, as shown in Fig. 2. At the design stage, a model for the automotive system is extracted and is used for the controller formulation and the model-based diagnostic methods. After the vehicle has been deployed, runtime diagnostics onboard the vehicle detect and isolate faults, and the knowledge of that is used to switch to a fault tolerant controller. The diagnostic data logged in the vehicle is then sent to the RDC where the new controller/diagnostics code is formulated. The reformulated code, along with a verification profile for run-time evaluation is sent to the vehicle and reprogrammed onto the ECUs. This section will explain the key parts of the AutoPlug architecture shown in Fig. 3 and provide an overview of their functions. 4 Yash V. Pant, Miroslav Pajic and Rahul Mangharam. AUTOPLUG: Architecture for Remote Electronic Controller Unit Diagnostics in Automotive Systems. University of Pennsylvania - Technical Report.
5 1. Vehicle Dynamics and Sensors/Actuators Measurements, like yaw rate and roll angle, are available as messages on the CAN bus through the corresponding sensors during vehicle operation. Actuators (e.g. throttle, brakes) can also be commanded by corresponding CAN messages. In addition, an approximation of the vehicle dynamics (e.g. powertrain dynamics, lateral dynamics) is available at the design stage. This knowledge of the vehicle dynamics and the run-time sensor measurements from the vehicle and actuation are used for the control and diagnostics onboard the vehicle. 2. Bank of Controllers Onboard the ECUs, multiple controllers are implemented to achieve the same performance criteria while using different subsets of available sensors. Normal operation involves the nominal controller using all the available (and needed) sensors for feedback control, and the sensor status is monitored by the diagnostics. Based on the status of sensors, only one of the controllers is active at a time. This bank of controllers aims to achieve the predefined control objective despite a sensor or set of sensors providing faulty measurements. Each individual controller corresponds to one case of sensor fault(s) and is activated whenever that fault or set of faults is detected. These controllers through either Accommodation or Reconfiguration may meet the control objective. Based on the information from the Onboard Diagnostics, the Supervisor Logic takes the original controller (for the no fault case) out of the loop and switches to the corresponding fault tolerant controller in runtime. 3. On-board Diagnostics Run-Time FDI is one of the principal components of the AutoPlug architecture. The onboard diagnostics code can be on a single ECU or distributed among different ECUs. The scheme which forms the backbone of the onboard diagnostics is tasked with monitoring sensor measurements and detecting any sensor faults and isolating the fault(s) to one or more sensors. A detailed explanation of the FDI scheme employed is outlined Supervisor The supervisor in Fig. 2 is implemented onboard an ECU to overlook the functioning of the fault-tolerant architecture. The supervisor receives information from the onboard diagnostics module and switches between the original (no fault) controller and the fault-tolerant controllers based on which sensor or set of sensors is faulty. The supervisor is also responsible for logging runtime sensor measurements, control inputs, and diagnostics information for a finite window of time. This data logging continues for some time after the fault is detected, and is then transmitted to the Remote Diagnostics Center. In addition, after the remote controller code update, the supervisor is responsible for monitoring the performance of the new controller. 5. The Remote Diagnostics Center (RDC) The RDC is a facility of the vehicle's manufacturer that is connected to all deployed vehicles and provides remote recalls management. The RDC performs tasks that may be autonomous or have a human in the loop. In the scope of this paper, the RDC performs autonomous tasks like controller reformulation and generation of a verification profile for patched controller evaluation onboard the vehicle at run-time. The RDC receives data from the vehicle whenever the vehicle encounters a fault. The logged data from the vehicle is used for the diagnostic tasks performed at the RDC and the reformulated controller is sent to the vehicle to be reprogrammed onto the ECUs. After a fault has been detected in a sensor onboard the vehicle, logged data (before and after the fault) about the vehicle performance and the diagnostics (i.e. the observer-based state estimates and residuals) are sent to the RDC. At the RDC, the first and foremost task is to find out whether the fault is indeed a sensor fault. The other possibility is that wear-and-tear on the vehicle has led to
6 changed parameters in the car model (e.g. suspension stiffness, cornering coefficients). This possibility is verified or ruled out by simulating the existing model with the logged inputs and comparing the outputs of this simulation to the logged outputs. If there is indeed a change in vehicle parameters, system identification is performed using the structure of the original model and the logged data to get a new plant model for that particular vehicle. This model is then used to generate new controller and diagnostics code for that vehicle. Irrespective of whether there is a sensor fault or a change in vehicle parameters, a new optimal controller is formulated and a performance profile for that controller is generated. This new control controller is coded and sent to the vehicle, along with the performance profile for run-time verification of the new controller. Figure 4. AutoPlug Test-bed Architecture with hardware-in-loop controllers B. AutoPlug Testbed The AutoPlug testbed is a Hardware-In-The-Loop simulation platform for ECU development and testing. The hardware is in the form of a network of ECUs, on which we implement the control and diagnostic algorithms. Each ECU runs the nano-rk RTOS, a resource kernel with preemptive priority-based real-time scheduling. Instead of a real-vehicle, our plant uses The Open-source Race Car Simulator (TORCS). This provides physics-based high-fidelity vehicle models and different road terrains. The testbed provides us with the realism of using a real vehicle, and also has enough flexibility to implement our own code. In addition, we can introduce faults that are not covered by set of standard Diagnostic Trouble Codes (DTC). We have tested out basic control algorithms, running as real-time tasks on nano-rk, for Anti-Lock Braking System (ABS), Traction Control, Cruise Control and Stability Control to see that the testbed indeed performs like a real vehicle would. AutoPlug is free and open-sourced. The AutoPlug testbed consists of three layers, Vehicle Dynamics Simulation, ECU Network and the middleware for control algorithms, runtime software/system diagnosis, code updates and verification. The simulation layer models the dynamics of a vehicle (e.g. Toyota Corolla) on the physics-based simulator (TORCS). The ECU network consists of four embedded controllers (Freescale HCS12) networked over an industry standard CAN bus. The middleware executes on a small computer that provides a gateway protocol for vehicle manufacturers to interface with the ECU network and provides us with the simulated capabilities of a RDC. Fig. 4 shows a simplified view of the AutoPlug architecture.
7 Figure 5. AutoPlug Test-bed with Engine and Brake ECUs running traction control, stability control, anti-lock braking, and adaptive cruise control The four ECUs on the testbed are: 1) TORCS Gateway ECU: The simulation data (sensor values) are sent from TORCS (running on a computer) to the hardware-based ECUs in real-time over the CAN bus via this gateway. The inputs to the simulation in TORCS (e.g. steering angle, acceleration and brakes), from the ECUs and the user, are also received through the TORCS gateway and sent to the simulator. 2) Brakes ECU: This ECU controls the inputs to the brakes of the vehicle in TORCS. Based on the user inputs (which are sent over the CAN bus) and sensor values, the control algorithm on the ECU calculates the brake force for the individual wheels of the vehicle (generalized as the left or the right side of the vehicle). This is sent as a message over the CAN bus to the TORCS Gateway which in turn sends the calculated inputs to the vehicle actuator in TORCS. 3) Engine ECU: This ECU controls the acceleration, gear and clutch inputs to the vehicle. Algorithms like Cruise Control and Traction control are implemented onboard this ECU and it's tasked with modulating the user inputs to the vehicle and sending the modulated inputs as a message to the TORCS Gateway over the CAN bus. 4) MATLAB Gateway: In order to log data from the testbed and to monitor the vehicle parameters (like yaw rate etc.) in real-time, the MATLAB gateway reads the TORCS outputs, user inputs, and controlled inputs from the Brakes and Engine ECU from the CAN bus and sends them to the middleware. The middleware can also communicate with the other ECUs over the CAN bus if needed. C. Code updates Reprogramming the ECUs over the CAN bus was one of the features of the first generation AutoPlug framework. A smartphone can connect to the vehicle's CAN bus through the Onboard Diagnostics (OBD) port and the code update can be downloaded onto the smartphone. This downloaded code can then programmed onto the ECU over the CAN bus. Once a fault is detected onboard the vehicle, the Remote Diagnostics Center receives information of that fault, and new code is formulated at the RDC. The vehicle user then has a choice to initiate a code update remotely. The downloaded code is loaded in a secure manner from the owner s smartphone into the vehicle via a WiFi gateway interfacing the vehicle s on-board diagnostics (OBD) computer.
8 In the past year, we have extended AutoPlug to include Adaptive Cruise Control (ACC) (for details see to evaluate control algorithms and security attacks on ECUs. We have been able to successfully demonstrate the effect of sensor noise, limited field of view and other non-idealities on the performance of ACC. C. Results We conducted two case studies with AutoPlug. One with Electronic Stability Control (ESP), and the other for Diesel After-treatment related recalls. For the former, we applied system identification on the vehicle plant model to extract the lateral dynamics. The results re seen below: Figure 6. (a) Vehicle Lateral Velocity outputs for closed-loop operation with hardware ECUs; (b) Forces and steering input into the system. Note, the brake forces are regulated by the feedback controller, while the steering input is from the vehicle driver; (c) Estimates from the Kalman filter driven by sensor inputs Faults were then injected as timing jitter, timing offsets and sensor noise. By applying the remote diagnostics procedures, we are able to derive adaptive fault residual thresholds to determine if the fault is with sensors or timing and not with normal driving behavior. Figure 7. (a) Residual and thresholds for lateral velocity sensor, with fault in roll angle sensor; (b) Residual and threshold for jittery Lateral Velocity sensor; (c) Residual and threshold for lateral velocity sensor (calibration fault) Conclusions In the project, we introduce an architecture for merging on-board and remote diagnostics for automotive control systems that can potentially make vehicle recalls a less reactive process. We also show a diagnostics scheme for a feedback control system and evaluate it on the AutoPlug testbed with reasonably good results. The overall scheme is relatively new, and potentially risky, but it can initially target non-critical control system, e.g. the vehicle body control systems. One particular example, which shows that this scheme could be useful, is the 936,000 vehicles that Honda had to recall due to issues with the power window and the automatic transmission. Other possible issues may arise with the safety of the Firmware-Over-The-Air (FOTA) approach for safety critical ECUs, where parties with malicious intent may hack into the network and compromise the safety of the vehicle by reprogramming the ECUs. So far, this has not been a part of our study, but Koscher et al. have extensively studied the security of modern automobiles. Also, security of Cyber Physical Systems (CPS) is of growing interest. A logical extension of our work is to focus on CPS security for networked automotive control systems, and is currently being looked at within Penn. A more
9 specific extension is to formulate a method to tune the design parameters of the threshold function in diagnostics scheme, which currently are experimentally chosen. Recommendations developed as a result of the project: AutoPlug is being applied to both software-based control system faults and also diesel aftertreatment faults. The use of remote diagnostics will help reduce the human and economic cost of software-related vehicle safety recalls.
Automotive Software Development Challenges Virtualisation and Embedded Security
Automotive Software Development Challenges Virtualisation and Embedded Security 1 Public ETAS-PGA/PRM-E October 2014 ETAS GmbH 2014. All rights reserved, also regarding any disposal, exploitation, Automotive
More informationCustomer Experience. Silicon. Support & Professional Eng. Services. Freescale Provided SW & Solutions
September 2013 Silicon Support & Professional Eng. Services Customer Experience Freescale Provided SW & Solutions Provide Valued Software, Support & Professional Engineering Services, Competitively 2 Customer
More informationCycurHSM An Automotive-qualified Software Stack for Hardware Security Modules
CycurHSM An Automotive-qualified Software Stack for Hardware Security Modules Dr. Frederic Stumpf, ESCRYPT GmbH Embedded Security, Stuttgart, Germany 1 Introduction Electronic Control Units (ECU) are embedded
More informationIntroduction CHAPTER 1
CHAPTER 1 Introduction Ever since the development of the first integrated circuits in the late 1950s the complexity of such devices doubled every 20 months. A development which has been anticipated by
More informationAutomotive Black Box Data Recovery Systems
Introduction Automotive Black Box Data Recovery Systems By Don Gilman For years, airplane crash investigators have had the benefit of retrieving data from the flight-data recorder, or "black box." This
More informationECM Diagnosis. Section 11. Learning Objectives:
Section 11 ECM Diagnosis Learning Objectives: 1. Diagnose ECM specific Diagnostic Trouble Codes. 2 Troubleshooting the diagnostic circuit. 3. Reprogramming the ECU. Engine Control Systems II - Course 874
More informationWireless Sensor Network Performance Monitoring
Wireless Sensor Network Performance Monitoring Yaqoob J. Al-raisi & David J. Parish High Speed Networks Group Loughborough University MSN Coseners 12-13th 13th July 2007 Overview The problem we are trying
More informationPEMS Conference. Acquiring Data from In-Vehicle Networks. Rick Walter, P.E. HEM Data Corporation
PEMS Conference Acquiring Data from In-Vehicle Networks Rick Walter, P.E. HEM Data Corporation Acquiring Data from In-Vehicle Networks Topics Overview/Benefits Heavy Duty J1939 protocol Available J1939
More informationAdvanced Electronic Platform Technologies Supporting Development of Complicated Vehicle Control Software
133 Hitachi Review Vol. 63 (2014), No. 2 Advanced Electronic Platform Technologies Supporting Development of Complicated Vehicle Control Software Yoshinobu Fukano, Dr. Sci. Kosei Goto Masahiro Matsubara
More informationFlexRay A Communications Network for Automotive Control Systems
FlexRay A Communications Network for Automotive Control Systems WFCS 2006 Rainer Makowitz Automotive Systems Engineering, EMEA Freescale and the Freescale logo are trademarks of Freescale Semiconductor,
More informationAutomotive Software Engineering
Automotive Software Engineering List of Chapters: 1. Introduction and Overview 1.1 The Driver Vehicle Environment System 1.1.1 Design and Method of Operation of Vehicle Electronic 1.1.2 Electronic of the
More informationIn-Vehicle Networking
In-Vehicle Networking SAE Network classification Class A networks Low Speed (
More informationLecture 3 - Model-based Control Engineering
Lecture 3 - Model-based Control Engineering Control application and a platform Systems platform: hardware, systems software. Development steps Model-based design Control solution deployment and support
More informationAnalysis of Performing Secure Remote Vehicle Diagnostics
Analysis of Performing Secure Remote Vehicle Diagnostics Dennis Kengo Oka 1 Takahiro Furue 1 Stephanie Bayer 2 Camille Vuillaume 1 1 ETAS K.K. Queen s Tower C-17F, 2-3-5, Minatomirai, Nishi-ku, Yokohama,
More informationThe SAE J1939 Communications Network
The SAE J939 Communications Network An overview of the J939 family of standards and how they are used An SAE White Paper Since its publication more than a decade ago, SAE J939 has become widely accepted
More informationThe research area of SET group is software engineering, and model-based software engineering in particular:
Introduction The research area of SET group is software engineering, and model-based software engineering in particular: Given the high-tech software-intensive industry in the Eindhoven region, we consider
More informationDeveloping software for Autonomous Vehicle Applications; a Look Into the Software Development Process
Developing software for Autonomous Vehicle Applications; a Look Into the Software Development Process By Andreas Lindenthal and Franz Walkembach, Wind River The concept of autonomous vehicles or unmanned
More informationAPPENDIX D PUBLIC AWARENESS INFORMATION
APPENDIX D PUBLIC AWARENESS INFORMATION READINESS FAILURE FACT SHEET Beginning December 2004, New York will implement a new motor vehicle emission testing program in 53 of New York s upstate counties,
More informationwww.imprezer.tk Introduction to www.union88.tk RACE FUELS Hans-Christian von der Wense Munich, Germany
Introduction to Hans-Christian von der Wense Munich, Germany Overview Progress in Automotive Electronics and it s Impacts on Networking LIN Consortium LIN Concept Physical Layer Data Link Layer LIN Network
More informationTOP 3 STRATEGIES TO REDUCE RISK IN AUTOMOTIVE/IN-VEHICLE SOFTWARE DEVELOPMENT
TOP 3 STRATEGIES TO REDUCE RISK IN AUTOMOTIVE/IN-VEHICLE SOFTWARE DEVELOPMENT Go beyond error detection to ensure safety and security TABLE OF CONTENTS The Three Biggest Challenges...4 Ensure compliance
More informationINSTRUMENT PANEL. 1995 Volvo 850 DESCRIPTION & OPERATION. 1995-96 ACCESSORIES & EQUIPMENT Volvo Instrument Panels
INSTRUMENT PANEL 1995 Volvo 850 1995-96 ACCESSORIES & EQUIPMENT Volvo Instrument Panels 850 WARNING: When working around steering column and before performing repairs, disconnect and shield battery ground
More informationValidating Diagnostics in Early Development Stages
Validating Diagnostics in Early Development Stages Explanations by means of an Example of an automatic exterior lighting control Dipl.-Ing. Valentin Adam, Daimler AG Dipl.-Ing. Matthias Kohlweyer, Daimler
More informationIntroduction to Electronic Signals
Introduction to Electronic Signals Oscilloscope An oscilloscope displays voltage changes over time. Use an oscilloscope to view analog and digital signals when required during circuit diagnosis. Fig. 6-01
More informationEHOOKS Prototyping is Rapid Again
09CV-0113 EHOOKS Prototyping is Rapid Again Vivek Jaikamal ETAS Inc. Nigel Tracey ETAS Ltd. Copyright 2009 SAE International ABSTRACT Automotive controls engineers have traditionally used bypass rapid
More informationVehicular On-board Security: EVITA Project
C2C-CC Security Workshop 5 November 2009 VW, MobileLifeCampus Wolfsburg Hervé Seudié Corporate Sector Research and Advance Engineering Robert Bosch GmbH Outline 1. Project Scope and Objectives 2. Security
More informationStandardized software components will help in mastering the. software should be developed for FlexRay were presented at
Embedded Software for FlexRay Systems Special aspects and benefits of implementing modularized software Standardized software components will help in mastering the growing complexity of the interplay of
More informationImproving Vehicle Diagnostics through Wireless Data Collection and Statistical Analysis
Improving Vehicle Diagnostics through Wireless Data Collection and Statistical Analysis Mathias Johanson Alkit Communications AB Sweden mathias@alkit.se Lennart Karlsson Department of Computer Aided Design
More informationUpdating Car ECUs Over-The-Air (FOTA) White Paper
Updating Car ECUs Over-The-Air (FOTA) ABSTRACT As the amount of software in automobiles grows, so too does the need to effectively manage that software asset. The telecom industry has a proven solution
More informationA Case Study of Application Development and Production Code Generation for a Telematics ECU with Full Unified Diagnostics Services
A Case Study of Application Development and Production Code Generation for a Telematics ECU with Full Unified Diagnostics Services Plan A little about Embed and our Ethos Description of the telematics
More informationENGINE CONTROLS AND FUEL SYSTEMS
ENGINE CONTROLS AND FUEL SYSTEMS SPRING 2005 FORD VEHICLE COMPUTER RELEARN PROCEDURES Performing repairs or service on any of the following may require you to initiate a computer relearn procedure in order
More informationCar Cybersecurity: What do the automakers really think? 2015 Survey of Automakers and Suppliers Conducted by Ponemon Institute
Car Cybersecurity: What do the automakers really think? 2015 Survey of Automakers and Suppliers Conducted by Ponemon Institute 1 Executive Summary The Ponemon Institute recently conducted a cybersecurity
More informationAUTOBOSS V30 hand-held diagnostic tool developed for the European market - the true all-in-one scan tool. OEM COVERAGE FOR EUROPEAN/ASIAN/US VEHICLES
AUTOBOSS V30 hand-held diagnostic tool developed for the European market - the true all-in-one scan tool. OEM COVERAGE FOR EUROPEAN/ASIAN/US VEHICLES Feature LARGE VGA COLOUR TOUCH SCREEN Software updates
More informationAutomotive Ethernet Security Testing. Alon Regev and Abhijit Lahiri
Automotive Ethernet Security Testing Alon Regev and Abhijit Lahiri 1 Automotive Network Security Cars are evolving Number of ECUs, sensors, and interconnects is growing Moving to Ethernet networks utilizing
More informationAUTOMOTIVE FIELDBUS TECHNOLOGY: DEVELOPMENT TOOLS AND ELECTRONIC EQUIPMENT FOR LABORATORY PRACTICES
AUTOMOTIVE FIELDBUS TECHNOLOGY: DEVELOPMENT TOOLS AND ELECTRONIC EQUIPMENT FOR LABORATORY PRACTICES S. OTERO, F. POZA, M. A. DOMÍNGUEZ AND P. MARIÑO Electronic Technology Department. University of Vigo.
More informationHardware in the Loop (HIL) Testing VU 2.0, 182.117, WS 2008/09
Testen von Embedded Systems Hardware in the Loop (HIL) Testing VU 2.0, 182.117, WS 2008/09 Raimund dkirner Testing Embedded Software Testing the whole system including the physical environment is not possible
More informationIntervid Fleet Management Fleet Telematics. Intervid, Inc. 5111 Pegasus Court, Suite C Frederick, MD 21704
Intervid Fleet Management Fleet Telematics Intervid Fleet Management Intervid Fleet Management brings to market a leading Global Fleet Telematics Technology. Intervid Fleet Management solutions have assisted
More informationI can make just such ones if I had tools, and I could make tools if I had tools. -Eli Whitney
I can make just such ones if I had tools, and I could make tools if I had tools to make them with. -Eli Whitney Automotive Software Development and Model Based Design (Matlab & Simulink) Ian M. Alferez,
More informationFrost & Sullivan Cybersecurity Presentation
Frost & Sullivan Cybersecurity Presentation 2015 will be the Year of Security, Prognostics & Evolution of OEM Vehicle Automation Strategies Praveen Narayanan Research Manager Feb 2015 Key Trends Impacting
More informationFault codes DM1. Industrial engines DC09, DC13, DC16. Marine engines DI09, DI13, DI16 INSTALLATION MANUAL. 03:10 Issue 5.0 en-gb 1
Fault codes DM1 Industrial engines DC09, DC13, DC16 Marine engines DI09, DI13, DI16 03:10 Issue 5.0 en-gb 1 DM1...3 Abbreviations...3 Fault type identifier...3...4 03:10 Issue 5.0 en-gb 2 DM1 DM1 Fault
More informationSoftware House Embedded Systems
Software House Embedded Systems Contacts: E-mobility, chassis, driver assistance and body electronics: Martin Richter +49 5371 805-1041 Infotainment, radio and instrument cluster: Sven Lochau +49 30 39978-7631
More informationOver-the-Air Software Updates: Deployment Strategies
Over-the-Air Software Updates: Deployment Strategies John Cain Head of Business Development Arynga, Inc. September, 2014 Topics Covered What is OTA/FOTA/SOTA? How does it work? How and who does it benefit?
More informationOSI Layers in Automotive Networks
OSI Layers in Automotive Networks 2013-03-20 IEEE 802.1 Plenary Meeting - Orlando Aboubacar Diarra, Robert Bosch GmbH 1 Outline OSI Reference Model Simplified generic Architecture for Automotive Serial
More informationAutomated Data Acquisition & Analysis. Revolutionize Validation Testing & Launch With Confidence
Automated Data Acquisition & Analysis Revolutionize Validation Testing & Launch With Confidence Stop waiting for this... Pass Fail CONTROLTEC is leveraging 21st century technologies to enable customers
More informationBest Practices for Verification, Validation, and Test in Model- Based Design
2008-01-1469 Best Practices for Verification, Validation, and in Model- Based Design Copyright 2008 The MathWorks, Inc. Brett Murphy, Amory Wakefield, and Jon Friedman The MathWorks, Inc. ABSTRACT Model-Based
More informationTHE RTOS AS THE ENGINE POWERING THE INTERNET OF THINGS
THE RTOS AS THE ENGINE POWERING THE INTERNET OF THINGS By Bill Graham and Michael Weinstein INNOVATORS START HERE. EXECUTIVE SUMMARY Driven by the convergence of cloud technology, rapidly growing data
More informationSCSK s Automotive Software Business
SCSK s Automotive Software Business Syoichi Kondou Executive Officer Automotive Systems Business Div. Manufacturing Systems Business Group SCSK Corporation May 20, 2015 Copyright(c) SCSK Corporation Page
More informationAUTOSAR Software Architecture
AUTOSAR Software Architecture Robert Warschofsky Hasso-Plattner-Institute für Softwaresystemtechnik Abstract. AUTOSAR supports the re-use of software and hardware components of automotive electronic systems.
More informationApplication of Software Watchdog as a Dependability Software Service for Automotive Safety Relevant Systems
Application of Software Watchdog as a Dependability Software Service for Automotive Safety Relevant Systems Xi Chen Juejing Feng Martin Hiller Vera Lauer RWTH Aachen University Volvo Technology Aachen,
More informationSafety and security related features in AUTOSAR
Safety and security related features in Dr. Stefan Bunzel Spokesperson (Continental) Co-Authors: S. Fürst, Dr. J. Wagenhuber (BMW), Dr. F. Stappert (Continental) Automotive - Safety & Security 2010 22
More informationCrossChasm Embedded Control Systems Whitepaper For Powertrain Design Teams
CrossChasm Embedded Control Systems Whitepaper For Powertrain Design Teams Background For vehicle design teams looking to rapidly develop and field early stage vehicle prototypes, a typical problem is
More informationSecurity in Vehicle Networks
Security in Vehicle Networks Armin Happel, Christof Ebert Stuttgart, 17. March 2015 V1.1 2015-04-28 Introduction Vector Consulting Services supports clients worldwide in improving their product development
More informationThe relevance of cyber-security to functional safety of connected and automated vehicles
The relevance of cyber-security to functional safety of connected and automated vehicles André Weimerskirch University of Michigan Transportation Research Institute (UMTRI) February 12, 2014 Introduction
More informationViCSiM. CAN/LIN Simulator and Monitor
CAN/LIN Simulator and Monitor ViCSiM CAN/LIN Communication Simulator and Monitor Even though it is low in price, it has advanced functions, such as log playback simulation and graph monitor. A product
More informationDiagnosis and Fault-Tolerant Control
Mogens Blanke Michel Kinnaert Jan Lunze Marcel Staroswiecki Diagnosis and Fault-Tolerant Control With contributions by Jochen Schroder With 228 Figures Springer 1. Introduction to diagnosis and fault-tolerant
More informationAdvanced Testing Methods for Automotive Software
Advanced Testing Methods for Automotive Software Madison Turner, Technology Analyst Accelerated Technology, a Mentor Graphics Division Recent history attests to the need for improved software testing methods
More informationSecure software updates for ITS communications devices
Secure software updates for ITS communications devices - International Standardization Activity in ITU-T SG17 - Masashi Eto, Senior researcher, Cybersecurity laboratory, Network security research institute,
More informationStar rating driver traffic and safety behaviour through OBD and smartphone data collection
International Symposium on Road Safety Behaviour Measurements and Indicators Belgian Road Safety Institute 23 April 2015, Brussels Star rating driver traffic and safety behaviour through OBD and smartphone
More informationMentor Embedded Automotive Solutions
Mentor Embedded Automotive Solutions Overview May 2013 mentor.com/embedded Android is a trademark of Google Inc. Use of this trademark is subject to Google Permissions. Linux is the registered trademark
More informationAdaptive Cruise Control of a Passenger Car Using Hybrid of Sliding Mode Control and Fuzzy Logic Control
Adaptive Cruise Control of a assenger Car Using Hybrid of Sliding Mode Control and Fuzzy Logic Control Somphong Thanok, Manukid arnichkun School of Engineering and Technology, Asian Institute of Technology,
More informationAutomotive and Industrial Data Security
André Weimerskirch Cybersecurity for Cyber-Physical Systems Workshop April 23-24, 2012 Overview Introduction and Motivation Risk analysis Current and future security solutions Conclusions Communication
More informationLongitudinal and lateral dynamics
Longitudinal and lateral dynamics Lecturer dr. Arunas Tautkus Kaunas University of technology Powering the Future With Zero Emission and Human Powered Vehicles Terrassa 2011 1 Content of lecture Basic
More informationECU State Manager Module Development and Design for Automotive Platform Software Based on AUTOSAR 4.0
ECU State Manager Module Development and Design for Automotive Platform Software Based on AUTOSAR 4.0 Dhanamjayan P.R. 1, Kuruvilla Jose 2, Manjusree S. 3 1 PG Scholar, Embedded Systems, 2 Specialist,
More informationAdaptive Cruise Control System Overview
5th Meeting of the U.S. Software System Safety Working Group April 12th-14th 2005 @ Anaheim, California USA 1 Introduction Adaptive Cruise System Overview Adaptive Cruise () is an automotive feature that
More informationOBD ll Vehicle Communications. OBD2training.com
OBD ll Vehicle Communications by Steve Caruso This presentation is going review CAN communications and cover 4 case studies of high speed CAN communication error. These types of failures can be applied
More informationRaptor-Telematics User Manual
CONTROL SYSTEM SOLUTIONS Raptor-Telematics User Manual Last Updated: 4/24/2015 Contents 1. Introduction...3 2. Hardware...4 2.1 C4Max...4 3. Software / Capabilities...5 3.1 CAN Logging and Remote Diagnostics...5
More informationSmartTrac Stability Control Systems
Innovation That Delivers SmartTrac Stability Control Systems safety SmartTrac brings stability to your vehicles and your bottom line. Meritor WABCO is a recognized pioneer in delivering advanced stability
More informationCreated by: Austin Davis Neel Iyer Darcie Jones Sascha Schwarz
EMGT 587 Systems Engineering Created by: Austin Davis Neel Iyer Darcie Jones Sascha Schwarz Table of Contents Introduction... 3 Operational Scenarios... 4 1. User sets and cancels cruise control:... 4
More informationDo AUTOSAR and functional safety rule each other out?
Software development Do AUTOSAR and functional safety rule each other out? While simplicity is a factor in safety-critical applications, AUTOSAR has over 6,000 configuration parameters and well over 100,000
More information1. SAFETY PRECAUTIONS AND WARNINGS
Table of Contents 1. SAFETY PRECAUTIONS AND WARNINGS...1 2. INTRODUCTION...3 2.1 On Board Diagnostics (OBD)...3 2.2 Vehicles Covered...4 2.3 Diagnostic Trouble Codes (DTCs)...6 2.4 Location of the Data
More informationService Manual Trucks
Service Manual Trucks Group 36 Vehicle Electronic Control Unit (MID 144), Diagnostic Trouble Code (DTC), Guide From build date 1.2007 PV776-88951780 Foreword The descriptions and service procedures contained
More informationAN INTEL COMPANY WIND RIVER AUTOMOTIVE SOLUTIONS
AN INTEL COMPANY WIND RIVER AUTOMOTIVE SOLUTIONS The Software-Enabled Automobile Software is a key differentiating factor for today s automakers. It is critical to harnessing the opportunities of autonomous
More informationA class-structured software development platform for on-board computers of small satellites
A class-structured software development platform for on-board computers of small satellites Takaichi Kamijo*, Yuhei Aoki*, Sotaro Kobayashi*, Shinichi Kimura* *Department of Electrical Engineering, Tokyo
More informationSaint Paul Public Schools Secondary Course Syllabus. Course Title: Automotive Technology 3 Course Length: Quarter/Semester/Trimester
Saint Paul Public Schools Secondary Course Syllabus Grade Level: 9-12 High School Subject Area: Technology Education Course number: T406131 Course Title: Automotive Technology 3 Course Length: Quarter/Semester/Trimester
More informationMellanox Academy Online Training (E-learning)
Mellanox Academy Online Training (E-learning) 2013-2014 30 P age Mellanox offers a variety of training methods and learning solutions for instructor-led training classes and remote online learning (e-learning),
More informationMulti-domain Model-driven Development Developing Electrical Propulsion System at Volvo Cars
Multi-domain Model-driven Development Developing Electrical Propulsion System at Volvo Cars Jonn Lantz Technical Specialist, Electric Propulsion Systems @ Volvo Car Group Jonn.Lantz@volvocars.com 1 Partners
More informationIntroduction to. LIN (Local Interconnect Network)
Introduction to LIN (Local Interconnect Network) Stéphane REY Revision 1.0 - ay 13 th, 2003 Table of content 1 INTRODUCTION...3 1.1 PURPOSE OF THE DOCUENT...3 1.2 ACRONYOUS...3 1.3 RELATED DOCUENTS...3
More informationEmissions Readiness Monitor Strategies
Emissions Readiness Monitor Strategies A presentation by NYS DMV s Office of Clean Air for New York State Automobile Dealers Association 10/30/2012 1 What is the payoff for mastering readiness monitor
More informationDevelopment of AUTOSAR Software Components within Model-Based Design
2008-01-0383 Development of AUTOSAR Software Components within Model-Based Design Copyright 2008 The MathWorks, Inc. Guido Sandmann Automotive Marketing Manager, EMEA The MathWorks Richard Thompson Senior
More informationSoftware Development for Multiple OEMs Using Tool Configured Middleware for CAN Communication
01PC-422 Software Development for Multiple OEMs Using Tool Configured Middleware for CAN Communication Pascal Jost IAS, University of Stuttgart, Germany Stephan Hoffmann Vector CANtech Inc., USA Copyright
More informationEVITA-Project.org: E-Safety Vehicle Intrusion Protected Applications
EVITA-Project.org: E-Safety Vehicle Intrusion Protected Applications 7 th escar Embedded Security in Cars Conference November 24 25, 2009, Düsseldorf Dr.-Ing. Olaf Henniger, Fraunhofer SIT Darmstadt Hervé
More informationAn Overview of NHTSA s Electronics Reliability and Cybersecurity Research Programs Paper ID 15-0454 Abstract
An Overview of NHTSA s Electronics Reliability and Cybersecurity Research Programs Authors(s): Arthur Carter, David Freeman, and Cem Hatipoglu National Highway Traffic Safety Administration (NHTSA) Paper
More informationMotorcycle Airbag System
PRESS INFORMATION September 2005 Motorcycle Airbag System Honda Motor Co., Ltd. Introduction Honda has been proactive in fostering driver and rider training as well as developing and implementing active
More informationEvent Data Recorders: Black Box data sources in automobiles and trucks
Event Data Recorders: Black Box data sources in automobiles and trucks David J. King, PE Passenger vehicles and heavy duty trucks may electronically record valuable information when involved in a collision.
More informationComparison of FlexRay and CAN-bus for Real-Time Communication
Comparison of FlexRay and CAN-bus for Real-Time Communication Andreas Forsberg Mälardalen University Högskoleplan 1 721 23 Västerås +46 768011236 afg05001@student.mdh.se Johan Hedberg Mälardalen University
More informationMaking model-based development a reality: The development of NEC Electronics' automotive system development environment in conjunction with MATLAB
The V850 Integrated Development Environment in Conjunction with MAT...iles and More / Web Magazine -Innovation Channel- / NEC Electronics Volume 53 (Feb 22, 2006) The V850 Integrated Development Environment
More informationElectrical/electronic components and installation locations
Volkswagen Passat B5 - Electrical/electronic components and installation locations Page 1 / 24 45-3 Electrical/electronic components and installation locations ABS/EDL/ASR Bosch 5.3 ABS hydraulic unit
More informationAlberta Reliability Standard Cyber Security Configuration Change Management and Vulnerability Assessments CIP-010-AB-1
A. Introduction 1. Title: 2. Number: 3. Purpose: To prevent and detect unauthorized changes to BES cyber systems by specifying configuration change management and vulnerability assessment requirements
More informationBus Data Acquisition and Remote Monitoring System Using Gsm & Can
IOSR Journal of Electrical and Electronics Engineering (IOSR-JEEE) e-issn: 2278-1676,p-ISSN: 2320-3331, Volume 8, Issue 3 (Nov. - Dec. 2013), PP 88-92 Bus Data Acquisition and Remote Monitoring System
More informationTesting for the Unexpected: An Automated Method of Injecting Faults for Engine Management Development
Testing for the Unexpected: An Automated Method of Injecting Faults for Engine Management Development By Shaun Fuller What will happen if a fault occurs in an automotive vehicle s electrical system? Similarly,
More informationHardware Virtualization for Pre-Silicon Software Development in Automotive Electronics
Hardware Virtualization for Pre-Silicon Software Development in Automotive Electronics Frank Schirrmeister, Filip Thoen fschirr@synopsys.com Synopsys, Inc. Market Trends & Challenges Growing electronics
More informationECU MS 3 Sport GT3 Cup. Quick Start Manual
ECU MS 3 Sport GT3 Cup Quick Start Manual V1.0 11/6/2015 Table of Contents Table of Contents 1 Welcome... 3 1.1 Hardware Checklist... 3 1.2 Hardware Installation... 3 1.3 Software Installation... 3 2 Tools:
More informationMaintain Fleet Management Solutions Using Wide Area Wireless Technology
Maintain Fleet Management Solutions Using Wide Area Wireless Technology Andreas Kohn Sierra Wireless, Inc. August, 2010 1 Introduction Wireless technology can provide a competitive advantage in today s
More informationPrinciples of a Vehicle Infotainment Platform
Hans-Ulrich Michel BMW Group Forschung und Technik Principles of a Vehicle Infotainment Platform copyright 2004 by OSGi Alliance All rights reserved. Agenda Vehicle System Architecture Trends In Vehicle
More informationEnergy Recovery System for Excavators Meng (Rachel) Wang, Chad Larish Eaton Corporation
Energy Recovery System for Excavators Meng (Rachel) Wang, Chad Larish Eaton Corporation Abstract Increasing fuel costs have become a significant portion of the operating expenses for owners and fleet managers
More informationEvaluation of the Automatic Transmission Model in HVE Version 7.1
HVE-WP-2010-3 Evaluation of the Automatic Transmission Model in HVE Version 7.1 Copyright 2010 Engineering Dynamic Corporation Eric S. Deyerl, P.E., Michael J. Fitch Dial Engineering ABSTRACT The Automatic
More informationAutomotive electronics CAN and LIN buses. Copyright 2006 Matrix Multimedia Limited
Automotive electronics CAN and LIN buses Copyright 2006 atrix ultimedia Limited About this presentation This presentation was developed by John Dobson anaging Director of atrix ultimedia Limited. PowerPoint
More informationPerformance Study based on Matlab Modeling for Hybrid Electric Vehicles
International Journal of Computer Applications (975 8887) Volume 99 No.12, August 214 Performance Study based on Matlab Modeling for Hybrid Electric Vehicles Mihai-Ovidiu Nicolaica PhD Student, Faculty
More informationBraking/Traction Control Systems of a Scaled Railway Vehicle for the Active Steering Testbed
Braking/Traction Control Systems of a Scaled Railway Vehicle for the Active Steering Testbed Min-Soo Kim and Hyun-Moo Hur Vehicle Dynamics & Propulsion System Research Department Korea Railroad Research
More informationNote: This information obtained from internet sources and not verified- use at your own risk!!!!
Cummins Engine Diagnostic Fault Codes for 2003 and later engines (generally for 2004 and later Alpines; see page 13 for earlier engine diagnostic codes): Note: This information obtained from internet sources
More informationTHE USE OF AUTOMOTIVE EMBEDDED SYSTEMS FOR FORENSIC ROAD TRAFFIC ACCIDENT ANALYSIS
Proceedings ITRN2014 4-5th September, LONG AND MAGUIRE: Accident Investigation THE USE OF AUTOMOTIVE EMBEDDED SYSTEMS FOR FORENSIC ROAD TRAFFIC ACCIDENT ANALYSIS Mr. James Long Lecturer Dublin Institute
More information